Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier: Wx+cNlAg0dDI/JXdy1RZsuVwBB4ghUD8YcH2GChEDTA=
Subject key identifier: B6:93:59:74:D7:B9:A7:E0:6E:40:58:54:4F:BF:3D:5A:36:2D:14:7E
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial: 0197C56F39842EDFD423B9FFCD7A198F31E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number: 08C2
Signing time: Tue 01 Jul 2025 10:01:30 +0000
Manifest this update: Tue 01 Jul 2025 10:01:30 +0000
Manifest next update: Wed 02 Jul 2025 10:01:30 +0000
Files and hashes: 1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: fao6YokNn1AyDAPrO/dbrRtV7vzQwF7H96WByozX/Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6f:39:84:2e:df:d4:23:b9:ff:cd:7a:19:8f:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Validity
Not Before: Jul 1 10:01:30 2025 GMT
Not After : Jul 2 10:01:30 2025 GMT
Subject: CN=b6935974d7b9a7e06e4058544fbf3d5a362d147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:55:78:90:71:a0:2d:f9:30:75:6f:91:2e:
de:b8:c3:2f:2e:0f:ca:97:6e:fb:e5:2f:9a:d0:a5:
ee:12:e5:fb:ee:34:ef:ee:40:10:77:e4:e7:07:9e:
bd:ac:83:f9:16:ca:7b:46:36:fb:86:ee:45:3c:e2:
38:0c:f1:c0:65:71:f2:ba:41:c4:fe:fb:fd:ba:cb:
64:50:86:34:e4:a3:4f:6f:74:58:d7:c1:a2:57:de:
0e:06:99:c9:e3:36:60:48:24:48:1b:19:bb:0d:41:
34:8f:dc:36:ed:b6:8a:10:a2:00:fa:3b:92:b5:cf:
1a:f8:76:c4:56:5d:c6:51:53:45:97:ef:72:fe:64:
50:38:3f:ca:b4:ba:8e:bd:e2:d5:a1:93:7d:e8:2a:
8b:e7:72:23:81:64:03:d9:39:9d:02:67:18:b4:ed:
fa:5f:76:e9:fc:2f:fb:d7:a4:1b:f8:60:65:c5:5d:
3b:68:3e:f3:bf:54:b9:a1:a8:cc:6a:73:d1:75:e1:
07:ea:c9:66:34:1e:a7:79:9c:55:6e:48:78:82:92:
62:b2:f1:a2:48:b8:2d:31:aa:27:cf:9a:b2:c9:90:
0c:46:6b:09:1a:5f:51:08:79:69:9b:58:1c:e3:c6:
53:a7:e3:35:7b:6e:8d:9a:d9:52:6e:be:92:45:cf:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:59:74:D7:B9:A7:E0:6E:40:58:54:4F:BF:3D:5A:36:2D:14:7E
X509v3 Authority Key Identifier:
keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:ce:64:06:76:9e:d7:e4:59:c0:7f:26:88:82:d8:2f:5f:
65:3e:61:f5:1d:ba:6e:42:a2:c9:17:ee:9c:a3:96:5c:f3:10:
21:a6:7c:fa:50:10:45:47:9c:27:03:31:8a:08:b1:23:a7:1f:
6b:e7:bc:26:12:0d:00:ec:5f:d0:14:c5:c2:f8:ef:94:c3:35:
6c:f6:22:e7:52:b6:66:a0:c2:f8:c9:e2:5a:89:62:8e:ef:34:
02:9e:34:3c:79:9f:f5:db:ea:9e:4a:ba:4d:05:59:b9:0a:a1:
c4:23:c3:1a:25:74:4a:cc:09:54:85:7e:cd:17:d7:c5:07:b6:
8c:63:8f:d0:8a:1b:ba:fc:dd:3c:9e:f3:1d:29:13:d7:32:f3:
d1:45:aa:4b:56:ec:cf:ab:6a:61:02:8f:52:e8:b4:05:31:aa:
c9:c5:ff:29:51:5d:f2:aa:46:2c:61:d2:c0:46:96:e8:a7:e7:
e5:ae:57:ce:8e:f3:b2:b5:63:39:d7:25:e2:ee:f0:db:1f:53:
ed:fd:27:6d:7a:d8:0d:f6:a0:5e:48:df:da:e7:af:25:f6:20:
8c:e9:e1:ea:c1:b3:29:7b:62:35:74:74:9f:db:3e:fa:19:7f:
ea:00:67:3f:4a:a7:88:8e:bb:5f:ce:af:34:03:52:fd:1e:b1:
7e:cb:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:18:15 2025 by rpki-client